$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa File: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (raw, json) Hash identifier: oGfsws8siNChxpH9RAt2M5I1gJ1AnMJOH9jEc2irTSM= Subject key identifier: 20:19:F8:0F:41:90:26:8F:15:1C:86:2E:46:9B:3B:39:FC:54:C9:AC Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584EFF777F4861B31B844B04CE00 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 35972 IP address blocks: 23.130.236.0/24 maxlen: 24 2602:f76d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:7f:48:61:b3:1b:84:4b:04:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=143099de-098f-45e9-98b5-d642687bd0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:ba:51:e2:6b:39:00:1c:62:a5:1a:8d:c9: 2a:2a:63:d6:b1:1e:07:36:e9:1b:18:3e:59:c9:b3: 95:36:f3:3c:6b:77:37:b7:d6:d9:58:03:c0:c5:7e: b8:f8:bc:08:01:2a:07:a7:95:57:a9:fa:87:ea:d9: 89:d8:ce:c6:03:f3:ab:7c:6a:0b:4a:9c:86:1f:1a: 5e:64:4f:7a:12:06:c0:4e:49:d9:dd:ab:ec:9e:03: 68:e2:20:6d:e3:a4:b1:e8:38:44:1f:99:16:39:a7: 79:9e:f2:f6:eb:4a:83:fd:93:cc:a7:19:89:f6:7d: 6d:39:18:1f:b0:f6:26:21:eb:42:8a:34:0d:94:e7: 70:d2:73:53:02:b4:79:22:1e:ff:59:89:33:08:55: 40:f5:bf:63:8c:9e:66:db:ac:d2:4b:86:2a:8b:1a: 97:03:ba:90:90:51:ad:be:22:c3:2e:c7:4a:27:3e: 16:63:9a:e2:13:f1:9b:83:1b:1b:f0:7a:bd:d9:23: 86:2f:54:e1:6d:3f:5d:1f:dd:95:7d:0c:70:1e:a1: 58:69:a4:1e:5e:d1:d2:8e:2e:b6:f6:62:b0:51:f6: b8:e4:65:e2:6b:ec:72:95:18:5a:23:54:b4:6e:8f: 4a:a7:a7:af:13:75:e7:2c:33:71:2f:f8:85:27:bf: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:19:F8:0F:41:90:26:8F:15:1C:86:2E:46:9B:3B:39:FC:54:C9:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 IPv6: 2602:f76d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7c:46:a2:cf:88:7e:7f:d2:6f:c2:c0:17:83:ac:7f:a6:44: 76:49:be:f3:05:a8:a6:62:15:64:c5:68:7f:a3:63:54:33:96: d4:eb:99:08:c0:9d:2a:b8:f9:fb:6d:ac:f2:6f:40:92:8a:eb: 7e:a6:93:82:47:fb:13:fd:4b:32:bf:f5:96:fa:e9:13:01:45: 46:15:fb:e9:e3:3c:b6:1d:06:55:e0:ec:f4:66:cf:56:bf:b7: 8f:c9:49:df:4a:5a:af:9c:58:5b:a4:36:18:78:56:74:7b:2d: 1f:6b:e1:df:0c:40:23:9b:f5:2a:4b:22:18:25:6f:2b:a2:2a: 68:53:da:92:72:f5:20:46:1d:51:39:25:cc:a9:2e:1f:1e:b6: c2:9b:5c:cf:22:4b:da:97:db:fd:ba:9b:d5:0c:e9:57:19:d0: 89:49:93:1e:63:29:7e:ad:24:be:fc:c3:f9:0a:5d:78:59:36: d4:de:74:dc:95:94:ab:4f:59:cd:ee:c1:53:e7:2d:4b:cc:4a: 6f:ea:df:5e:8a:ab:a4:fa:74:2f:3c:af:63:21:d8:17:2a:49: 82:51:be:2b:ab:d4:af:f1:e5:84:d9:52:42:d1:c5:15:45:9c: 32:b0:91:59:0a:4f:6f:aa:3d:e0:ef:e8:9e:c1:83:c3:8f:3c: a2:d5:31:49 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7/d39IYbMbhEsEzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MTQzMDk5ZGUtMDk4Zi00NWU5LTk4YjUtZDY0MjY4N2JkMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBe6UeJrOQAcYqUajckqKmPWsR4HNukbGD5Z ybOVNvM8a3c3t9bZWAPAxX64+LwIASoHp5VXqfqH6tmJ2M7GA/OrfGoLSpyGHxpe ZE96EgbATknZ3avsngNo4iBt46Sx6DhEH5kWOad5nvL260qD/ZPMpxmJ9n1tORgf sPYmIetCijQNlOdw0nNTArR5Ih7/WYkzCFVA9b9jjJ5m26zSS4YqixqXA7qQkFGt viLDLsdKJz4WY5riE/Gbgxsb8Hq92SOGL1ThbT9dH92VfQxwHqFYaaQeXtHSji62 9mKwUfa45GXia+xylRhaI1S0bo9Kp6evE3XnLDNxL/iFJ7/N1QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCAZ+A9BkCaPFRyGLkabOzn8VMmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvNDBmMWJlM2ItMjFhYi0z ZTBkLWJiOTEtYzdjMzFkZGUwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LsMA4E AgACMAgDBgQmAvdtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXfEaiz4h+f9JvwsAXg6x/pkR2Sb7zBaim YhVkxWh/o2NUM5bU65kIwJ0quPn7bazyb0CSiut+ppOCR/sT/Usyv/WW+ukTAUVG Ffvp4zy2HQZV4Oz0Zs9Wv7ePyUnfSlqvnFhbpDYYeFZ0ey0fa+HfDEAjm/UqSyIY JW8roipoU9qScvUgRh1ROSXMqS4fHrbCm1zPIkval9v9upvVDOlXGdCJSZMeYyl+ rSS+/MP5Cl14WTbU3nTclZSrT1nN7sFT5y1LzEpv6t9eiquk+nQvPK9jIdgXKkmC Ub4rq9Sv8eWE2VJC0cUVRZwysJFZCk9vqj3g7+iewYPDjzyi1TFJ -----END CERTIFICATE-----Generated at Tue Sep 22 01:16:51 2026 by rpki-client